diff options
| author | Nick Mathewson <nickm@torproject.org> | 2011-12-14 16:38:43 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2011-12-15 11:28:24 -0500 |
| commit | 9d0777839be6642954a4c064c819d406d8bb7cb4 (patch) | |
| tree | 6c19e41480bb925c9099180dd1e6c36dc12b0aad /changes/buffer_bug | |
| parent | ff2c9acbb39d7ae917501b1e719cf5be994fe4e2 (diff) | |
| download | tor-9d0777839be6642954a4c064c819d406d8bb7cb4.tar tor-9d0777839be6642954a4c064c819d406d8bb7cb4.tar.gz | |
Add a fix for the buf_pullup bug that Vektor reported
Diffstat (limited to 'changes/buffer_bug')
| -rw-r--r-- | changes/buffer_bug | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/buffer_bug b/changes/buffer_bug new file mode 100644 index 000000000..634f60953 --- /dev/null +++ b/changes/buffer_bug @@ -0,0 +1,7 @@ + + o Major bugfixes: + - Fix a heap overflow bug that could occur when trying to pull + data into the first chunk of a buffer, when that chunk had + already had some data drained from it. Fixes CVE-2011-2778; + bugfix on 0.2.0.16-alpha. Reported by "Vektor". + |